#1DNS protocol fuzzing, mutation testing, resolver testing, and DNS security assessment tools.
Kitploit recommended
projectdiscovery/shufflednsMassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy…
mandatoryprogrammer/judasdnsNameserver DNS poisoning attacks made easy
boy-hack/ksubdomainSubdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second
crypt0s/fakednsA regular-expression based python MITM DNS server with support for DNS Rebinding attacks
alephnullsk/dnsgenGenerates domain name permutations for subdomain enumeration and recon, supporting custom wordlists, cloud patterns, and fast mode for security…
homas/ioc2rpzioc2rpz is a place where threat intelligence meets DNS.
e1abrador/burp-encode-ipBurp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.
shadowy-pycoder/go-http-proxy-to-socksCLI MITM proxy that converts SOCKS4/SOCKS5 into HTTP/HTTPS/HTTP2/HTTP3 proxy with transparent TCP/UDP redirection, ARP/NDP/DNS spoofing, traffic…
who0xac/dnsintDNSint - A comprehensive DNS reconnaissance and OSINT toolkit for domain intelligence gathering and security analysis.
lele394/dnsnitchDNSnitch is a local, privacy-first DNS server that puts you in complete control of your network traffic. Unlike passive blocklists, DNSnitch operates…
goethe-universitat-cybersecurity/nsec3-encloser-attackThis project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868.
hackintoanetwork/cve-2023-52235-poc-spacex-starlink-dns-rebindingProof-of-concept exploit for CVE-2023-52235 demonstrating DNS rebinding attack against SpaceX Starlink user terminals to bypass network security…
cyberdev.hacker/nsec3-xThe modern, high-speed successor to nsec3walker. A specialized NSEC3 forensics engine built in Go for rapid zone harvesting and automated hash…
